PT-2021-16453
CVE-2021-25201
·
تاريخ النشر
2021-07-23
·
تاريخ التحديث
2021-07-29
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Learning Management System version 1.0
Description:
The issue allows remote attackers to execute arbitrary SQL statements through the
id parameter to obtain sensitive database information. This is achieved by exploiting a SQL injection vulnerability.Recommendations:
For Learning Management System version 1.0, avoid using the
id parameter in affected API endpoints until the issue is resolved. As a temporary workaround, consider restricting access to sensitive database information to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾